Meritshot
Legal

Data Privacy & Student Records Policy

How we collect, store, use, and protect your personal data.

8.1 Data We Collect

Meritshot Zetta Edutech Private Limited collects the following categories of personal data from students:

  • Identity information: full name, date of birth, government-issued ID
  • Contact information: email address, phone number, residential address
  • Academic information: prior qualifications, admission test scores, program enrollment data
  • Financial information: fee payment records, EMI history, bank details where provided for refund processing
  • Technical data: IP addresses, device information, session logs, and LMS activity data
  • Assessment data: test scores, project submissions, attendance records, mentor evaluations
  • Placement data: resume, LinkedIn profile, interview feedback, offer details

Legal Reference: Collection of personal data is governed by the Information Technology Act, 2000, the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDPA).

8.2 Purpose of Data Use

Data collected is used exclusively for:

  • Student enrollment, identity verification, and account management
  • Academic progress tracking and personalised learning support
  • Certificate issuance and verification
  • Placement assistance, including sharing profiles with hiring partners with student consent
  • Communication regarding program updates, fee reminders, and policy changes
  • Legal compliance, audit purposes, and regulatory obligations
  • Improving the quality and delivery of Meritshot's programs

Important: Meritshot will never sell student data to third parties for commercial or marketing purposes. Data is shared with third parties only where necessary for service delivery (e.g., payment processors, LMS providers, hiring partners) and is subject to appropriate data processing agreements.

8.3 Student Rights

Under applicable data protection law, students have the right to:

  • Access their personal data held by Meritshot upon written request
  • Request correction of inaccurate or incomplete data
  • Request deletion of data that is no longer necessary for the stated purpose (right to erasure), subject to legal retention obligations
  • Withdraw consent for specific data uses — this may affect access to certain services
  • Lodge a complaint with the Data Protection Board of India (once constituted under the DPDPA, 2023) if rights are violated

To exercise any of these rights, students should submit a written request via email to Meritshot's Data Privacy Officer.

8.4 Data Retention

  • Enrollment and academic records will be retained for a minimum of 7 years post-program completion for legal and audit purposes
  • Certificate records will be retained indefinitely for verification purposes
  • Financial records will be retained as required under applicable taxation and accounting laws
  • Marketing consent data will be retained until consent is withdrawn
  • Upon expiry of the retention period, data will be securely deleted or anonymised

8.5 Data Security

Meritshot implements reasonable technical and organisational security measures to protect student data, including:

  • Role-based access controls to limit data access to authorised personnel only
  • Encryption of sensitive data in transit and at rest where technically feasible
  • Regular security reviews of internal systems and third-party platforms
  • Incident response procedures for data breach notification in compliance with applicable law

Legal Reference: In the event of a data breach involving sensitive personal data, Meritshot will follow notification obligations as prescribed under the Digital Personal Data Protection Act, 2023.

8.6 Cookies & Platform Data

Meritshot's website and LMS use cookies and tracking technologies for:

  • Session management and authentication
  • Analytics and usage pattern monitoring (e.g., Google Analytics)
  • Remembering user preferences

Students and visitors may manage cookie preferences through their browser settings. Disabling certain cookies may affect platform functionality.